sops: Improve secrets provisioning to split out staging

This commit is contained in:
Tristan Daniël Maat 2022-10-12 02:03:22 +01:00
parent ab3aa19481
commit 6a81ce4c1d
Signed by: tlater
GPG key ID: 49670FD774E43268
8 changed files with 151 additions and 7 deletions
configuration

View file

@ -10,6 +10,7 @@
./services/webserver.nix
./services/starbound.nix
./ids.nix
./sops.nix
];
nix = {
@ -25,11 +26,6 @@
nixpkgs.config.allowUnfreePredicate = pkg:
builtins.elem (lib.getName pkg) ["steam-runtime" "steamcmd"];
sops = {
defaultSopsFile = ../keys/external.yaml;
secrets.steam = {};
};
# Optimization for minecraft servers, see:
# https://bugs.mojang.com/browse/MC-183518
boot.kernelParams = ["highres=off" "nohz=off"];